[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: woody firewall broken?



On Tue, 16 Jul 2002, Davi Leal wrote:

> > > P.D.: Do you know if sendmail uses only 25/tcp?. /etc/services does not
> > > shows any 25/udp.

sendmail uses TCP:25 (optionally also 587{msa} and 465{smtps}) only...

> > The version of sendmail I'm running 8.12.1-5 listens on tcp port 25 and
> > also TCP port 587.  For details regarding port 587 use, take a look at
> > /usr/share/doc/sendmail/RELEASE_NOTES.gz and also RFC 2476.  Port 587 is
> > used to run a Message Submission Agent which is turned on by default.

Correct... you *can* make 587 available only to localhost:
FEATURE(`no_default_msa')dnl
DAEMON_OPTIONS(`Family=inet, Name=MSA-v4, Port=587, M=E, A=127.0.0.1')dnl

> > As far as I know, sendmail doesn't listen on any UDP ports.

again, correct

> Maybe, I'm not sure, some remote MTAs, for example smtp.navegalia.com, uses
> UDP connections. You can try "telnet smtp.navegalia.com 25" behind a
> firewall which filter the udp connection.

Eh?
$ telnet smtp.navegalia.com 25
Trying 212.73.32.155...
Connected to smtp.airtel.net.
Escape character is '^]'.
220 ESMTP service

It answers TCP, I know of no MTA (or MUA) that uses UDP...

If you're having firewall problems then most likely:
	*) TCP port 25 is not allowed
	*) TCP port 113 (AUTH) is not allowed (it should be REJECTED, a
	   DROP will result in some remote MTA timeouts as they try to
	   issue AUTH requests)

-- 
Rick Nelson
<Mercury> emacs sucks, literally, not a insult, just a comment that its
          large enough to have a noticeable gravitational pull...


-- 
To UNSUBSCRIBE, email to debian-firewall-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org



Reply to: